CVE-2026-77683 | Comfast CF-N1-S 2.6.0.1 mbox-config?method=SET&section=ntp_timezone system timestr command injection

A vulnerability, which was classified as very critical, was found in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection.

This vulnerability is reported as CVE-2026-77683. The attack can be launched remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More